Security News > 2020 > December > Subway Sandwich Loyalty-Card Users Suffer Ham-Handed Phishing Scam

Count the Subway sandwich faithful among the latest victims of cybercriminals.

Researchers at Sophos discovered a phishing campaign aimed at Subway loyalty-card members in the U.K. and Ireland, in an attempt to trick them into downloading malware.

A second email with the same text was delivered to another loyalty cardholder and supplied to Sophos with the same message.

Subway spokesperson Shani Shaker Kekati told Threatpost that the company has "No evidence guest accounts have been hacked," adding, "However, the system which manages our email campaigns has been compromised, leading to a phishing campaign that involved first name and email. The system does not hold any bank or credit-card details. Crisis protocol was initiated and compromised systems locked down."

Luckily for Subway loyalty-card holders, this latest attack phishing attack against Subway wasn't nearly as difficult to identify.

News URL

https://threatpost.com/subway-loyalty-card-phishing-scam/162308/